🕵️ AMOS Stealer

The items that name it 13

• Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix
  writeupas threat actors2026-09-28

  Prior Huntress-observed campaign: SEO-poisoned ChatGPT and Grok conversations posed as macOS troubleshooting advice, tricking users into running commands that downloaded AMOS stealer.

• Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware
  writeupas threat actors2026-09-15

  macOS infostealer malware variant delivered via ClickFix or manual DMG download, collects browser data, cryptocurrency-wallet data, Telegram data, Apple Notes data, cookie data, and macOS login-keychain information

• The AI Attack Surface: How Threat Actors Abuse Trusted AI Platforms
  writeupas threat actors2026-08-27

  Stealer malware delivered via ClickFix-like instructions hosted in fake ChatGPT and Grok shared conversations posing as macOS disk-cleaning advice, and later in a fake OpenAI Codex download variant reported by Cato Networks

• Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware
  writeupas threat actors2026-08-19

  macOS infostealer malware delivered via both the malicious Google Doc's manual update (GAPIUpdate.dmg) and the fake DocSend installer (DocSendInstaller.zip); targets browser passwords/cookies, crypto wallets, keychain data, Telegram files, and Notes.app database, exfiltrating to http://86.54.25[.]21

• MacSync Stealer: How a Google Search for Claude Led to a macOS Infostealer
  writeupas threat actors2026-08-17

  Malware previously observed by Huntress being delivered via malicious ChatGPT and Grok shared conversations using ClickFix in 2025.

• Reverse Engineering the Six Stages of MacSync Stealer and RAT
  writeupas threat actors2026-07-29It is written here as AMOS Stealer (Atomic Stealer).

  Referenced as previously documented by Huntress, delivered through poisoned ChatGPT and Grok conversations; the article notes MacSync shares lineage/similarities with AMOS/Atomic Stealer.

• macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox
  writeupas classification.key entities2026-06-23
• Deceptive Installers: How Fake Apps Target macOS
  writeupas classification.key entities2026-06-10
• Attackers Didn’t Wait for AI. They Built Workflows Around It.
  articleas threat actors2026-04-22

  Malware campaign that served fake ChatGPT/Grok-style AI conversation pages with macOS 'clear disk space' instructions, tricking users into running Terminal commands that exposed credentials, compromised systems, and installed persistent malware

• How Fake OpenClaw Installers Spread GhostSocks Malware
  writeupas classification.key entities2026-03-04
• AI-Poisoning & AMOS Stealer: The Biggest Mac Threat | Huntress
  writeupas classification.key entities2025-12-09
• OWASP Agentic Skills Top 10 (AST10)
  repoas classification.key entities
• OWASP Agentic Skills Top 10
  paperas classification.key entities